🚨 CVE-2026-77171
A public shared collective always allowed recipients of the link to create pages.